@accordproject/cicero-cli (>=0.3.4, <=0.22.3-20211027130006), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +473 more potentially affected by CVE-2021-3647 via urijs (>=1.16.1, <=1.19.6)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616,...

barberousse (>=0.1.0, <=0.1.6), borrowing_exerci (>=0.1.0, <=0.4.51) +19 more potentially affected by CVE-2021-36753 via bat (>=0.9.0, <=0.17.1)

bat CARGO version =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2-alpha.1, =0.16.0, =0.16.0, =0.1.0-rc1, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.14.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:RUSTSEC-2021-0106...

artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +489 more potentially affected by CVE-2021-38195 via libsecp256k1 (>=0.1.3, <=0.3.5)

libsecp256k1 CARGO version =0.1.3, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.1.1, =0.7.0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.8.2 and more Source cves: CVE-2021-38195 Source advisory: OSV:RUSTSEC-2021-0076...

a2 (>=0.2.0, <=0.5.3), abci-rs (0.10.0) +5476 more potentially affected by CVE-2021-32714 via hyper (>=0.0.1, <=0.14.5)

hyper CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-32714 Source advisory: OSV:GHSA-5H46-H7HH-C6X9...

ark-bls12-377 (0.2.0), ark-crypto-primitives (0.2.0) +19 more potentially affected by CVE-2021-38194 via ark-r1cs-std (0.2.0)

ark-r1cs-std CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ark-r1cs-std and may be impacted: - ark-bls12-377 0.2.0 - ark-crypto-primitives 0.2.0 - ark-curve-constraint-tests 0.2.0 - ark-ed-on-bls12-377 0.2.0 - ark-ed-on-bls12-381...

requeuest (>=0.1.1, <=0.2.1), sqlxmq (>=0.2.0, <=0.2.1) potentially affected by CVE-2021-38191 via tokio (1.8.0)

tokio CARGO version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - requeuest =0.1.1, =0.2.0, =0.2.1 Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...

abbegm (0.5.0), actix-jwt-session (>=0.1.0, <=0.1.1) +393 more potentially affected by CVE-2021-38191 via tokio (>=0.3.7, <=1.5.0)

tokio CARGO version =0.3.7, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.6.0, =0.1.0, =0.3.6, =0.3.15 and more Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...

a2 (>=0.2.0, <=0.5.3), abci-rs (0.10.0) +5476 more potentially affected by CVE-2021-32715 via hyper (>=0.0.1, <=0.14.5)

hyper CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-32715 Source advisory: OSV:RUSTSEC-2021-0078...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +24303 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.0.5, =0.2.0, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.1, =1.0.3, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0145...

@auto-canary/all-contributors (>=9.16.1-canary.undefined.13449.0, <=9.34.2-canary.1241.15885.0), @auto-canary/auto (>=9.16.1-canary.undefined.13449.0, <=9.34.2-canary.1241.15885.0) +23 more potentially affected by CVE-2021-23412 via gitlogplus (3.1.7)

gitlogplus NPM version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on gitlogplus and may be impacted: - @auto-canary/all-contributors =9.16.1-canary.undefined.13449.0, =9.16.1-canary.undefined.13449.0, =9.23.0-canary.1099.14362.0,...

@lx-frontend/theme-preview (0.0.1), file-sort-rename (1.0.1) +21 more potentially affected by CVE-2021-32736 via think-helper (1.0.23)

think-helper NPM version 1.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on think-helper and may be impacted: - @lx-frontend/theme-preview 0.0.1 - file-sort-rename 1.0.1 - ntt-redis =1.0.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1, =1.0.3, =1.0.2, =1.0.1,...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1122 more potentially affected by CVE-2020-36049 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2020-36049 Source advisory: OSV:GHSA-XFHH-G9F5-X4M4...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3166 more potentially affected by CVE-2021-32723 via prismjs (>=1.2.0, <=1.23.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @ada87/hexo-prism-plugin 2.3.0 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves:...

@apollosproject/apollos-cli (>=2.43.1-canary.4, <=3.0.0), @apollosproject/react-native-make (>=3.0.4, <=3.0.5) +22 more potentially affected by CVE-2021-29060 via color-string (>=1.2.0, <=1.5.3)

color-string NPM version =1.2.0, =2.43.1-canary.4, =3.0.4, =3.0.2, =1.0.0, =2.1.2, =3.0.1, =2.4.0, =3.2.4, =0.0.0-alpha.1, =0.0.0-alpha.1, =0.0.0-alpha.1, =0.0.0-alpha.1, =0.0.3, =0.0.0-alpha.1, =0.0.7 and more Source cves: CVE-2021-29060 Source advisory: OSV:GHSA-257V-VJ4P-3W2H...

app.io (>=0.0.1, <=0.0.4), barbakoa (>=0.0.1, <=0.0.17) +21 more potentially affected by CVE-2021-25928 via safe-obj (1.0.2)

safe-obj NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on safe-obj and may be impacted: - app.io =0.0.1, =0.0.1, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.6.5, =0.3.0, =1.0.1, =1.0.0, =1.0.0, =1.2.2 and more Source cve...

ferris-rich-input (0.0.1) potentially affected by CVE-2021-33829 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2021-33829 Source advisory: OSV:GHSA-RGX6-RJJ4-C388...

sealious (>=0.9.4, <=0.12.6) potentially affected by CVE-2021-25948 via expand-hash (1.0.1)

expand-hash NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on expand-hash and may be impacted: - sealious =0.9.4, =0.12.6 Source cves: CVE-2021-25948 Source advisory: OSV:GHSA-X3WR-V4WX-5QPC...

alchemymvc (>=0.2.2, <=0.3.0), camo (>=0.1.1, <=0.12.1) +27 more potentially affected by CVE-2021-23395 via nedb (>=1.0.2, <=1.7.4)

nedb NPM version =1.0.2, =0.2.2, =0.1.1, =0.8.0, =0.0.2, =1.0.0, =0.12.0, =1.0.0, =1.0.0, =1.0.0-alpha.1, =1.0.1, =1.0.0, =1.0.0, =0.3.0, =0.9.1 and more Source cves: CVE-2021-23395 Source advisory: OSV:GHSA-339J-HQGX-QRRX...

@gitldy1013/vuepress-theme-ldy (>=1.1.2, <=1.1.3), @next-theme/plugins (>=0.0.2, <=8.1.0) +18 more potentially affected by CVE-2021-34801 via valine (>=1.3.6, <=1.4.14)

valine NPM version =1.3.6, =1.1.2, =0.0.2, =2.0.0-beta.0, =1.0.11-alpha.1, =0.0.1, =1.0.0, =1.0.0, =1.0.8-alpha.5, =1.1.2, =1.2.1, =1.0.1, =1.0.0, =1.1.4 and more Source cves: CVE-2021-34801 Source advisory: OSV:GHSA-P2C4-GXP4-J3XP...

@adv-ui/nc-strings (3.2.0), @arshad/gatsby-theme-phoenix (>=1.1.0, <=1.1.8) +153 more potentially affected by CVE-2021-32696 via striptags (>=3.0.0, <=3.1.1)

striptags NPM version =3.0.0, =1.1.0, =1.0.0, =0.1.0, =0.3.0, =1.1.1-alpha.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.3.3, =1.0.2, =1.0.6 and more Source cves: CVE-2021-32696 Source advisory: OSV:GHSA-QXG5-2QFF-P49R...